evolix
/
minifirewall
18
0
Fork 0
Code Issues 4 Pull Requests 3 Releases 1 Activity

We have to accepted output ICMP and IGMP since we drop output traffic by default

This commit is contained in:
Tristan PILAT 2020-11-18 18:00:01 +01:00
parent ba865faf0a
commit 36634a705f
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
minifirewall-start.sh
View File

@ -381,6 +381,11 @@ fi
$NFT add rule inet minifirewall minifirewall_output ct state established,related accept
# ICMP and IGMP traffic is accepted
$NFT add rule inet minifirewall minifirewall_output ip protocol icmp accept
$NFT add rule inet minifirewall minifirewall_output meta l4proto ipv6-icmp accept
$NFT add rule inet minifirewall minifirewall_output ip protocol igmp accept
trap - INT TERM EXIT
echo "...starting NFTables rules is now finish : OK"